Privacy and safety
Built for personal family photos
Back In The Picture handles sensitive images, including memorial keepsakes and private family moments. The product separates private uploads from shareable results and keeps protected operations on the server.
Last updated: July 14, 2026
Information we collect
We process account details such as your email and user ID, the source photos and instructions you submit, generated results, generation and credit history, payment order identifiers, support messages, and limited technical logs needed to operate and secure the service.
Private storage and access
Original group photos, portraits, and generated results are stored in a private Cloudflare R2 bucket and tied to your authenticated account. Protected images are delivered through server routes rather than a public bucket.
AI processing and temporary copies
To create a keepsake, source images and instructions are sent from our server to the selected AI infrastructure provider. For fal.ai requests, payload-history storage is disabled and temporary input and output media are configured to expire after one hour. A provider may still retain limited operational or security records under its own policies and legal obligations.
Service providers
We use Clerk for authentication, Neon for account and generation records, Cloudflare R2 for private image storage, fal.ai or another configured image provider for generation, Vercel for application hosting, Creem for payments and moderation, and Resend for transactional email when enabled. They process only the information needed for their role.
Payment processing
Payments, taxes, and receipts are processed by Creem. We receive order and product identifiers, status, amount, currency, and account-related metadata needed to deliver credits and handle refunds. Back In The Picture does not store your full card number or CVC.
Intentional sharing
A keepsake is only made accessible through a public share page after you choose to create a share link. Anyone who receives that link may view it, so private download is the safest option for highly sensitive images. Shared pages are marked not to be indexed by search engines.
Retention and deletion
Active source photos and results remain in your private gallery until you delete the keepsake. Deleting a keepsake removes its source photos, generated result, share page, and generation record from our active systems. Temporary provider copies may take a short time to expire, and payment, fraud-prevention, security, or legal records may be retained when required.
Your choices and requests
You can delete individual keepsakes from your gallery. For account access, correction, deletion, privacy, or payment questions, contact support@backinthepicture.com. We may need to verify your identity before completing a request.
Security, children, and international processing
We use authentication, private storage, transport encryption, and restricted server credentials to reduce risk, but no online service can guarantee absolute security. The service is not directed to children under 13. Data may be processed in countries where our providers operate, subject to their safeguards and applicable law.
A note about public share links
A share link is a deliberate public-access action. It is difficult to guess and is excluded from search indexing, but anyone with the link can open it until the keepsake is deleted. Use private download when a family photo should never leave your direct control.
Read photo selection guide